Veronte Autopilot DRx
Veronte Autopilot DRx is the version of Veronte Autopilot with distributed redundancy. Specifically designed to comply with eVTOL certification requirements, the Distributed Redundant Autopilot developed by Embention is the only “Ready to Fly” eVTOL autopilot on the market.
Developed in compliance with aviation standards DO178C / ED-12, DO254, and DO160, the system is “Safety Independent” thanks to its Dual Management Board, which prevents any single-point failure from a degrading operation.
Independent Arbiter
Configurable Voting Logic
Distributed Redundancy
Robust to Zonal Failure
No Single Point of Failure
Distributed Redundancy
Independent redundant hardware
Robust Design
Robust to zonal failures
eVTOL Certification
Compliance with eVTOL certification
Distributed Redundancy
Distributed Redundancy
The distributed redundancy in Veronte Autopilot DRx features independent redundant hardware on 3 levels. This architecture makes it robust to zonal failures, avoiding the fault propagation and single points of failure, meeting the most demanding requirements for eVTOL certification.
The first level comprises three independent Autopilot units executing the flight control. These communicate with two Management Boards that manage the voting algorithms. On the third level are the Isolators that identify faults in peripherals connected to the bus and isolate them from the rest of the ecosystem. All this is interconnected by redundant communication buses.
Fail Operational
Fail Operational
Thanks to the redundancy of both the independent autopilots and the Management Board, the new Veronte Autopilot DRx has been designed without a single point of failure (No Single Point of Failure) providing redundancy and independence for maximum safety.
In addition, two redundant communication buses are used for the interaction between the devices. Incorporating multiple microcontrollers in charge of real-time bus supervision, which in case of an anomaly will isolate the device avoiding the propagation of the failure. This architecture makes the system robust to failures, allowing it to continue the mission safely.
Redundant Communication
Two redundant buses
High Reliability
No single point of failure
Real-time supervision
Multiple microcontrollers are included
Safety Independent
Double Management Board
Architecture Reliability
Automated fault detection and isolation
Maximum safety
Each component integrates a "Built-in test"
Failure Isolation
Failure Isolation
The Veronte Autopilot DRx architecture has automated fault detection and isolation at two levels. Each component integrates a "Built-in Test" to auto-detect the fault and communicate with the arbiter for disconnection.
In addition, both the Management Board and the Bus Isolator have mechanisms to detect failures in the bus or in the rest of the peripherals (i.e. babbling idiot failure) and isolate them from the rest of the network in a safe way.
Designed for eVTOL
Comply with the most demanding eVTOL requirements
Robust Design
Robust to single and zonal points of failure
Advanced Control Modes
Such as Autonomous Control or Fly-by-wire
Designed for eVTOL
Designed for eVTOL
Designed specifically for eVTOL, Veronte Autopilot DRx offers maximum safety and independence. It is also really flexible in terms of functionality with tools to adapt it perfectly to the requirements of any eVTOL configuration (multirotor, tilting wings, tilting rotors, gyrocopter, STOL...) without the need for custom development and without losing compliance with DO178C.
In addition, it can be configured to include fully customized control modes, such as a fully autonomous control mode or fly-by-wire (arcade) mode. Robust to single and zonal points of failure and compatible with peripheral redundancy, it is specially designed for eVTOL certification in systems with DAL-A requirements.
Design Reliability
DO178C / ED-12 and DO254 DAL-B compliance
Environmental Test
Test according to DO160G
Certification Documents
Design, testing and manufacturing reliability evidences
Certification
Certification
Embention makes available to eVTOL manufacturers a certification data package that includes all the documentation needed to demonstrate the reliability of the autopilot in an eVTOL certification process.
| Mechanical | |
| Enclosure | Anodized aluminium | IP67 Waterproof | EMI Shielding |
| Weight | 750g (Including 3x radio module) |
| Size | 128x70x84mm |
| Mounting | M4 screws |
| Temperature range (No convection) | -40 to 65ºC |
| Pressure port diameter | 2.4mm |
| RF connectors | SSMA jack female | 1x LOS Radio / 2x GNSS / 1x 4G) |
| Advanced Vehicle Control | |
| eVTOL operations | Fully autonomous | Fly-by-wire | Remote control |
| Critical systems | MALE, HALE & tactical | Populated areas | Critical facilities |
| Any vehicle layout | Aircraft: Fixed-wing, VTOL, multicopter, autogiro, helicopter, parafoil, or hybrid | USV (Surface Vehicles ) | UGV (Ground Vehicles) | Other |
| Control surfaces | Aileron, flap, elevator, rudder, gas, v-tail, x-tail, elevon, flaperon, ruddervator, cyclic, collective, throttle, custom servo mixing… | Up to 32 actuators | Custom servo mixing |
| Engine | Electric, combustion or turbine | Multiple engine support |
| Control modes | Autonomous | Manual | Assisted manual | Fly-By-Camera | Custom |
| Automations | Custom automatic routines | Actions (go home, go to, output trigger…) | Events (variable range, WP reach, Control phase…) |
| Programs | Custom control algorithms | Configurable execution flow |
| Control blocks | PID | Energy control | Gain scheduling | Autotuning | Stall protection |
| Control phases | Customizable | Takeoff, landing, cruise, hold, autorotation, gliding, taxi, tumble, sea skimming… |
| GNSS denied | Inertial navigation | Sensors + wind estimation |
| Custom messages | CAN bus | Serial | User defined protocols |
| Embedded DEM | Worldwide Digital Elevation Model (DEM) onboard |
| Mission computer | Veronte VCP | Onboard telemetry and telecommand | Inflight mission edit | NVIDIA, Linux or Windows |
| Control station software | Veronte Pipe included | Support for custom CS software integration |
| Simulation environment | HIL (Hardware In the Loop) | SIL (Software In the Loop) | Custom integrations |
| Safety & Reliability | |
| No SPOF | No single point of failure | Robust to arbiter failure |
| 3x Redundancy | Embedded triple redundancy |
| 4x Redundancy | External autopilot core | Main controller or fail-operational unit |
| Redundant power input | Up to 4 independent inputs |
| FTS (Flight Termination System) | Dissimilar microprocessors & regulation stages | Automatic or manual activation |
| Internal redundancy | Redundant communication bus | Kill me function on each core |
| Custom voting logics | Configurable voting logics and strategies |
| Reliability documents | DDP: Declaration of Design & Performance ATR: Acceptance Test Results COC: Certificate Of Compliance |
| Manufacturing process | Strict Acceptance Test Procedure (ATP) | Conformal coat |
| ESS (Environment Stress Screening) | Temperature and vibration circles for early failure detection |
| DO160 & MIL-STD-810 Environmental test | Temperature, temperature variation, altitude, shock, vibration |
| DO178C Software reliability | DAL-B |
| DO254 Hardware reliability | DAL-B |
| Certification datapack | PSAC, SDP, CMP, SQAP, SVP, HVVP, HCMP, HPAP, TTR, SVCP, SQAR, SCI, SECI, SRD, TD, SVR, SCMR, SAS, PR, HRD, HDD, HTP, HVVR, HCMR. |
| Certification support | Dedicated engineering support |
| Software testing | 24/7 testing environment | Custom test for specific PDIs | Iron bird setup |
| MTBF | 4×10^7 MTBF | Project-based MTBCF calculation |
| Configurable failsafe | Custom events and actions | Multiple safety levels |
| Warnings | Visual & sound alarms | Customizable |
| User access level | Unlimited users | Custom permissions |
| Sensors | |
| Redundancy | Redundant sensors on each autopilot core |
| 9x Barometer | 3x 0 to 103 kPa | 3x 1 to 120kPa | 3x 30 to 110 kPa |
| 3x Pitot | 3x 0.003kPa (5kt 8km/h sea level) to 6.9kPa (206kt 382km/h sea level) | Up to 1570kt 2900km/h with optional external sensor |
| 6x Accelerometers (3 axes) | 6x ±16G | 3x ±24G | Sustained manoeuvre (peaks up to ±32g) |
| 6x Gyroscopes (3 axes) | 9x 125 to 2000 deg/sec (compensated) |
| 6x Magnetometers (3 axes) | 6x 16 gauss | 3x 8 gauss |
| 6x GPS | GPS, BeiDou, GLONASS | RTK | GNSS-based Attitude |
| 4x Voltage | 4x Input voltage sensor |
| 3x Temperature | 3x Internal temperature sensor |
| External sensors | Enhanced compatibility | Navigation fusion |
| I / O (Critical Ports) | |
| Vin | 4x (6.5-36V) |
| Power | 17 / 29 (without data link / 3G data) |
| PWM / GPIO | Up to 16 (multiplexed) |
| RS232 | 1x (multiplexed) |
| RS485 | 1x (multiplexed) |
| VOut | 5 & 3.3V (multiplexed) |
| CAN Bus | 2x (redundant) |
| ADC | 5x (0-3V) (independent) |
| EQUEP (Encuadrature encoder) | 1x (multiplexed) |
| I2C | 1x (multiplexed) |
| UART | 1x (multiplexed) |
| USB | 3x (one per module) |
| I/O Extenders | Veronte CAN expander | Redundant CAN bus communications |
- Multiplexed: Arbiter controls which module signal is in the I/O
- Redundant: Communications bus
- Independent: All modules receive the same signal
| I / O (Auxiliary Ports – Arbiter Microprocessor) | |
| Vin | 1x (6.5-36V) DC |
| PWM / GPIO | 8x |
| I2C | 1x |
| RS232 | 2x |
| RS485 | 1x |
| ADC | 10x (0-36V) |
| ARINC | 1x Tx / 1x Rx |
| I / O (Auxiliary Ports – External FCU Interface) | |
| PWM / GPIO | 12x |
| CAN Bus | 2x |
| RS232 | 1x |
| RS485 | 1x |
| ADC (Output) | 4x |
| FTS (Input) | 1x Watchdog |
| Data Link | |
| LOS Datalink | 3x Embedded datalink | Custom combinations |
| LOS Datalink options | 410-480MHz | 902-928MHz | 2400-2483MHz | None |
| BLOS Datalink | 3x Embedded datalink | 4G | eSIM or nano-SIM |
| External modules | RS232 connection | SATCOM | 4G | LOS |
| Other | External radio module via RS232, Satcom, 4G |
| Tracking antenna | Veronte Tracker or third party |
| Operation | |
| Geofencing | Hard & soft | No go areas |
| Sense & avoid | Lidar, radar, ADS-B |
| Selectable units | Selectable units or custom unit creation |
| Workspace | Drag & drop telemetry displays (LCD, text, gauge, LED…) | Configurable colors & sizes |
| Map view | Map sources (Google Maps, Bing Maps, Open Maps…) | Custom map layers |
| Multiple platforms | Simultaneous platform control from the same control station |
| Multiple control stations | Multiple control stations available for controlling or monitoring |
| Route | Intuitive user interface for waypoint & route creation | Inflight mission edit |
| Payload | Camera gimbal, tracking antenna, transponder, camera shooter, GNSS receiver… |
| Post-flight | Post-flight analysis tool | CSV data export |
| Safety pitot | Manual control at any time during the operation | Joystick connection on ground or onboard |
| Export | No export restrictions, ITAR free | Advanced functionalities may require an export permit. Please contact our team for further details |
Veronte Autopilot DRx
Veronte Autopilot 4x - w/o DAA v1.8
23500
Veronte Autopilot 4x - ADS-B v1.8
27000
Veronte Autopilot 4x - Remote ID v1.8
24000
